i have an ASA 5520 with ips module . i installed it since 3 weeks. For the ips module , it is installed in inline mode.
Till now i didnot see any events appeared on the sensor.i configured it to scan http traffic from any source to the inside LAN subnet (10.1.0.0/16)
can i know that if the sensor is working properly or not?? and how ???
The following is the configuration on the ASA:
access-list outside_mpc extended permit tcp any 10.1.0.0 255.255.0.0 eq www
match access-list outside_mpc
ips inline fail-open sensor vs0
service-policy outside-policy1 interface outside.
please find the attached file for ips config.